As201354: Difference between revisions
No edit summary |
No edit summary |
||
| Line 20: | Line 20: | ||
|} | |} | ||
Adding a new Node on master<syntaxhighlight lang="shell" line="1" start="1">/ip/firewall/filter add chain=input action=accept protocol=udp dst-port=9999 comment="Allow WG incoming" | Adding a new Node on master<syntaxhighlight lang="shell" line="1" start="1">/ip/firewall/filter add chain=input action=accept protocol=udp dst-port=9999 comment="Allow WG incoming" | ||
/ipv6 address add address=2001:67c:8d4:XXXX::1/56 interface=ether1 | |||
/interface wireguard peers add interface=wg-internal \ | /interface wireguard peers add interface=wg-internal \ | ||
| Line 26: | Line 28: | ||
persistent-keepalive=25 | persistent-keepalive=25 | ||
/ipv6 route | /ipv6 route add dst-address=2001:67c:8d4:XXXX::/56 gateway=fd00:0:0:1::X</syntaxhighlight>Adding a new node on node<syntaxhighlight lang="shell">/interface wireguard add name=wg-internal mtu=1420 | ||
/interface wireguard add name=wg-internal mtu=1420 | |||
/ipv6 address add address=fd00:0:0:1::XXXX/64 interface=wg-internal advertise=no | /ipv6 address add address=fd00:0:0:1::XXXX/64 interface=wg-internal advertise=no | ||
| Line 36: | Line 37: | ||
endpoint-port=XXXX \ | endpoint-port=XXXX \ | ||
allowed-address=fd00:0:0:1::XXXX/128,2001:67c:8d4::/48 \ | allowed-address=fd00:0:0:1::XXXX/128,2001:67c:8d4::/48 \ | ||
persistent-keepalive=25 | persistent-keepalive=25</syntaxhighlight>Checking that it works<syntaxhighlight lang="shell"> | ||
</syntaxhighlight>Checking that it works<syntaxhighlight lang="shell"> | |||
# on master | # on master | ||
/ping fd00:0:0: | /ping fd00:0:0:1::X interface=wg-internal | ||
/ping 2001:67c:8d4:XXXX::1 | /ping 2001:67c:8d4:XXXX::1 | ||
# on node | # on node | ||
/ping fd00:0:0:1::1 interface=wg- | /ping fd00:0:0:1::1 interface=wg-internal | ||
</syntaxhighlight> | </syntaxhighlight> | ||
Revision as of 21:53, 11 February 2026
| ID | Location | Provider | Public /56 block | Internal /64 |
|---|---|---|---|---|
| 0 | 🇨🇭Zurich | https://www.securebit.ch/ | 2001:67c:8d4:100::/56 | fd00:0:0:1::2/128 |
| 1 | 🇩🇪Düsburg | https://www.securebit.ch/ | 2001:67c:8d4:200::/56 | fd00:0:0:1::3/128 |
Adding a new Node on master
/ip/firewall/filter add chain=input action=accept protocol=udp dst-port=9999 comment="Allow WG incoming"
/ipv6 address add address=2001:67c:8d4:XXXX::1/56 interface=ether1
/interface wireguard peers add interface=wg-internal \
public-key="NODE_PUBLIC_KEY" \
allowed-address=fd00:0:0:1::XXXX/128,2001:67c:8d4:XXXX::/56 \
persistent-keepalive=25
/ipv6 route add dst-address=2001:67c:8d4:XXXX::/56 gateway=fd00:0:0:1::X
Adding a new node on node
/interface wireguard add name=wg-internal mtu=1420
/ipv6 address add address=fd00:0:0:1::XXXX/64 interface=wg-internal advertise=no
/interface wireguard peers add interface=wg-internal \
public-key="MASTER PUBLIC=" \
endpoint-address=XXXXXXXX \
endpoint-port=XXXX \
allowed-address=fd00:0:0:1::XXXX/128,2001:67c:8d4::/48 \
persistent-keepalive=25
Checking that it works
# on master
/ping fd00:0:0:1::X interface=wg-internal
/ping 2001:67c:8d4:XXXX::1
# on node
/ping fd00:0:0:1::1 interface=wg-internal